I. PRIVACY POLICY AND DATA PROTECTION

In accordance with current legislation, detodo.shop (hereinafter, the "Website") undertakes to implement the necessary technical and organizational measures to ensure an adequate level of security relative to the risk involved in the processing of collected data.

Applicable Legislation

This privacy policy complies with current Spanish and European regulations regarding the protection of personal data, specifically:

Regulation (EU) 2016/679 (GDPR)
Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPD-GDD)
Royal Decree 1720/2007 implementing the former Spanish Data Protection Law
Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE)

Identity of the Data Controller

The data controller responsible for the processing of personal data collected on this Website is:

Urbisunt, S.L.

Tax ID (CIF): B45885621

VAT: ESB45885621

Address: C/ Gardenia, 10, 45122 Argés, Toledo, Spain

Registered in the Mercantile Registry: Volume 1657, Book 0, Page 101, Section 8, Sheet TO 40213, Entry 1 (05/02/2018)

Contact email: info@detodo.shop

Telephone: +34 643781136

Data Protection Officer (DPO)

Urbisunt, S.L. currently does not have an appointed Data Protection Officer. For any privacy-related matters, you can write to: info@detodo.shop

Data Collection and Registration

Personal data collected through Website forms will be included in our internal files in order to facilitate, manage, and fulfill the commitments made between the User and detodo.shop, and to respond to any queries or requests.

A data processing activity log is maintained as required by Article 30 of the GDPR.

Principles Governing Data Processing

Data processing at detodo.shop adheres to the following principles:

Lawfulness, fairness, and transparency
Purpose limitation
Data minimization
Accuracy
Storage limitation
Integrity and confidentiality
Accountability

Categories of Data

We only process basic identification data, such as:

Full name, email, phone number, postal address
IP address and device data
Transactional data: orders, invoices, delivery tracking, etc.
Cookie preferences
Customer service interactions

We do not process special categories of data (as defined in Article 9 of the GDPR).

Legal Basis for Processing

The primary legal basis is the User’s explicit consent. Data may also be processed when necessary for contractual performance or legitimate interest.

The User may withdraw consent at any time without affecting use of the Website.

Purposes of Data Processing

The personal data we collect is used for:

Order management and customer service
Handling queries and complaints
Marketing, statistics, and service optimization
Personalizing the user experience
Improving site performance and navigation

We do not store banking or payment information.

Data Retention Period

Personal data is retained for a maximum of 5 years, or until the User requests its deletion.

Data Recipients

User data may be shared with:

Financial institutions and payment providers
Logistics and shipping companies
Customer support platforms
Email marketing tools and technical services

We do not sell or disclose personal data to third parties without consent, except where legally required.

Customer Reviews

We may contact Users to request reviews or feedback about their experience with detodo.shop. Published reviews may include:

Date of submission and purchase
Name or initial of the reviewer
Product details

Reviews may be stored for up to 3 years for reference purposes.

International Transfers

At present, no international data transfers are planned. Should this change, Users will be informed of the destination and safeguards applied.

Minors

Only individuals aged 14 or older may provide valid consent. If the User is under 14, consent from a parent or legal guardian is required.

Data Security

We apply appropriate security measures to prevent unauthorized access, loss, or disclosure of personal data. The Website uses SSL encryption for secure communications.

Should a data breach occur, we will notify affected Users without undue delay as required by the GDPR.

Confidentiality

All personal data will be treated confidentially. The Data Controller ensures that confidentiality is respected by employees, collaborators, and partners.

Social Media

Our social media presence is governed by the terms and privacy policies of each platform. We reserve the right to remove any content posted by third parties that violates legal, ethical, or community standards.

Cookies

We use cookies to enhance the browsing experience. Users may disable cookies through their browser settings. For more details, please read our Cookie Policy.

User Rights

Users have the right to:

Access their personal data
Request rectification of inaccurate data
Request data deletion ("right to be forgotten")
Request restriction of processing
Request data portability
Object to data processing
Not be subject to automated decision-making

To exercise your rights, send an email to info@detodo.shop with the subject: "GDPR – www.detodo.shop", and include:

Full name and copy of ID
Description of your request
Contact address
Date and signature
Supporting documentation if applicable

Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for their privacy practices or content.

Complaints to the Supervisory Authority

If you believe your rights have been violated, you may file a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos: www.aepd.es

II. ACCEPTANCE AND CHANGES TO THIS POLICY

By using this Website, you confirm that you have read and accepted this Privacy Policy and agree to the processing of your personal data as described.

detodo.shop reserves the right to update this Privacy Policy at any time due to legal, technical, or business reasons. Changes will not be individually notified. We recommend reviewing this page periodically.

Last updated: July 19, 2025